Security Scan Report: geronaimilianos.org

Site favicon
Submitted: Completed: publiccompleted
This website contacted 14 IPs in 2 countries across 11 domains to perform 135 HTTP transactions. The main domain is geronaimilianos.org and was registered 10 months ago.

Submitted URL: https://geronaimilianos.org/

AI Security Verdict

Confirmed Scam

Confidence: 88%

9
Risk Score

Compromised WordPress site serving malware: primary domain and loaded resource flagged as malware, CRITICAL EtherHiding C2 IDS alert, Ethereum RPC traffic, and hidden gambling spam links.

Risk Factors (5)
Malware-tagged threat-intelligence IoC on the primary domain and on a loaded third-party resource
CRITICAL network IDS malware alert (EtherHiding exfiltration) plus Ethereum RPC C2 endpoint indicators
Hidden gambling/SEO-spam link injection unconnected to the site's religious content
Injected third-party script/external domain (voderlence.com) flagged as malware by multiple feeds
Unranked domain with no reputation
Domain age information unavailable

Details

Page Title

Homepage - ΓΕΡΟΝΤΑΣ ΑΙΜΙΛΙAΝΟΣ ΣΙΜΩΝΟΠΕΤΡΙΤΗΣ

Scan Type

public

Domain Name Analysis

Domain 'geronaimilianos.org' uses the non-profit oriented generic top-level domain (.org) with no subdomain. The registrable portion 'geronaimilianos' spans 15 characters containing eight vowels alongside 7 consonants. Splitting it apart reveals four words: gerona, i, milian, os. Expect 4 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://geronaimilianos.org/

Page Load Overview

85.25s
Total Load Time
3.1 MB
Total Size

Language Analysis

Primary Language

🇬🇷Greek
Code: el
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:el
Text Length:19,300 chars
Detector Agreement:75%

Website Classification

Primary Category

forum community discussion65% confidence
Type: spa
Method: ml+structural

All Detected Categories

forum community discussion
65%
forum
25%
corporate
25%
news/blog
20%

Detected Features

Articles
Comments
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1850.6.153.171Ashburn, Virginia, United States
AS31898Oracle Corporation
9192.178.183.95Google · CDNUnited States
AS15169Google LLC
9104.17.208.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9192.0.77.2San Francisco, California, United States
AS2635Automattic, Inc
9142.251.13.139Google · CDNUnited States
AS15169Google LLC
9192.0.76.3San Francisco, California, United States
AS2635Automattic, Inc
9146.19.24.104Poland
AS201814MEVSPACE sp. z o.o.
9142.251.14.94Google · CDNUnited States
AS15169Google LLC
9172.217.118.4Google · CDNUnited States
AS15169Google LLC
9188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
13514--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1187450776244A47B622FBBCC9055732DBB66860CDB72468772FCD3689BCED92881031D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:vhjX3XNyeTxX80zeiIxX80Eeiam7LMQ27CtR8rd+9a:vhjX3XNxxX80zeiIxX80Eeiam7LMQ273

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:347760:gtawoDkGIBCxBMkYgQBGC8ZjlRYUNAGUCKkBDEiDcAJAiBCoAyQZSeRsrzClAIGCigNhZQNiMcQIYUESBUCgQg2RMFIBiRTN

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0019193d39011d3d
Perceptual Hash:8a637173c7cf2234
Difference Hash:495131697131f1f1
Wavelet Hash:0101193d3d197f7f
Color Hash:#6ee06c

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data